Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
File:                     3138392e38392e37362e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier:          mfzgwRWJ8BR22nUUxQloMB85CUPTNv1dNhfFRwDamgo=
Subject key identifier:   6D:05:0A:75:5E:29:42:45:36:91:9F:3C:A8:33:09:30:3A:6A:89:20
Certificate issuer:       /CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
Certificate serial:       3E985153001077D627DF2B0E95B862E61AE69C4C
Authority key identifier: F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa
Signing time:             Mon 17 Mar 2025 14:16:02 +0000
ROA not before:           Mon 17 Mar 2025 14:11:02 +0000
ROA not after:            Mon 16 Mar 2026 14:16:02 +0000
asID:                     28184
IP address blocks:        189.89.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 03:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:98:51:53:00:10:77:d6:27:df:2b:0e:95:b8:62:e6:1a:e6:9c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C6E0587FD7F70011347A9B93679A111A9A7FB9
        Validity
            Not Before: Mar 17 14:11:02 2025 GMT
            Not After : Mar 16 14:16:02 2026 GMT
        Subject: CN=6D050A755E29424536919F3CA83309303A6A8920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:dd:a7:18:7a:fd:01:2f:2c:63:02:c6:d7:
                    46:31:44:27:30:3c:ca:e4:48:c2:cf:b6:56:7d:35:
                    43:97:e4:a7:ef:fe:aa:dc:01:1e:e5:97:dc:a4:1c:
                    73:34:a7:86:74:95:91:bc:f1:38:33:a4:59:61:95:
                    ce:85:b5:e4:6c:11:f4:71:d4:ce:5c:58:82:20:f4:
                    1b:7f:de:b4:a1:d3:a9:a3:2a:3e:67:77:26:94:65:
                    a4:f1:65:61:8b:aa:80:31:4f:2d:aa:e6:70:88:27:
                    13:77:42:03:16:07:01:d2:fe:85:5e:52:a2:ab:0b:
                    9b:7e:f9:5f:cd:73:06:5f:8c:b9:c9:bf:a6:07:c5:
                    96:8c:c9:45:35:31:79:d2:6c:73:1b:d9:ae:72:8b:
                    3e:e2:81:e5:36:cc:51:68:04:14:6e:22:02:f1:b1:
                    45:f7:27:c9:b8:6d:42:78:61:20:73:a2:86:8d:0c:
                    c3:14:b2:a3:49:17:49:7f:c4:27:12:13:26:66:a5:
                    90:9f:6a:ed:e9:b2:68:44:a8:dc:e9:5b:d1:c2:13:
                    81:47:4d:fc:a5:bd:40:ec:8a:1c:c1:9b:4c:85:75:
                    6e:4f:c6:03:90:fc:1c:9b:be:54:86:ef:d0:89:8f:
                    aa:81:67:23:a9:a9:37:3e:a8:66:93:a5:b9:b8:7a:
                    16:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:0A:75:5E:29:42:45:36:91:9F:3C:A8:33:09:30:3A:6A:89:20
            X509v3 Authority Key Identifier:
                keyid:F2:C6:E0:58:7F:D7:F7:00:11:34:7A:9B:93:67:9A:11:1A:9A:7F:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2C6E0587FD7F70011347A9B93679A111A9A7FB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37362e302f32342d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:be:77:0c:14:09:ac:2e:c7:e8:da:51:c3:f0:1c:59:bb:
         9d:40:c6:38:dd:97:7c:4e:3b:bd:e9:d6:58:e7:e2:d6:db:8c:
         bd:80:fc:bc:5b:44:d9:51:50:33:4d:f0:d9:c3:08:7b:25:67:
         4e:d8:3b:05:8b:42:12:f5:63:9e:05:d6:4b:08:fc:f5:35:6d:
         f0:32:c7:72:6e:a2:84:84:8e:20:84:79:c3:dc:47:77:29:16:
         d6:54:8b:26:d1:42:38:65:2f:cd:f8:21:5a:2c:53:40:83:9f:
         31:2c:ae:4a:60:58:db:51:e8:69:c5:7f:a4:81:a6:87:ee:27:
         f0:cd:45:ea:d8:59:e2:de:8a:f8:14:69:1d:b6:00:b5:4d:70:
         3d:a1:68:bc:b0:26:27:13:6c:53:6f:9b:7b:ce:46:ab:92:e8:
         8c:5c:81:3e:1d:55:a9:4c:77:71:e2:5f:4f:21:2c:d2:32:fc:
         7f:18:a5:79:b6:08:ed:d0:82:5f:b4:7a:cf:6c:b6:56:aa:97:
         03:5a:3e:e6:28:ce:73:b2:ef:7a:55:9a:b5:12:fa:fe:36:9b:
         bc:c6:be:79:9f:ae:b8:48:47:d2:3e:ee:ec:aa:fa:97:bc:98:
         8a:e9:02:99:0f:b3:e0:5f:8a:d3:8c:3c:17:4c:f7:eb:a2:66:
         3a:8d:8a:66
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPphRUwAQd9Yn3ysOlbhi5hrmnEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDNkUwNTg3RkQ3RjcwMDExMzQ3QTlCOTM2NzlBMTEx
QTlBN0ZCOTAeFw0yNTAzMTcxNDExMDJaFw0yNjAzMTYxNDE2MDJaMDMxMTAvBgNV
BAMTKDZEMDUwQTc1NUUyOTQyNDUzNjkxOUYzQ0E4MzMwOTMwM0E2QTg5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S92nGHr9AS8sYwLG10YxRCcw
PMrkSMLPtlZ9NUOX5Kfv/qrcAR7ll9ykHHM0p4Z0lZG88TgzpFlhlc6FteRsEfRx
1M5cWIIg9Bt/3rSh06mjKj5ndyaUZaTxZWGLqoAxTy2q5nCIJxN3QgMWBwHS/oVe
UqKrC5t++V/NcwZfjLnJv6YHxZaMyUU1MXnSbHMb2a5yiz7igeU2zFFoBBRuIgLx
sUX3J8m4bUJ4YSBzooaNDMMUsqNJF0l/xCcSEyZmpZCfau3psmhEqNzpW9HCE4FH
TfylvUDsihzBm0yFdW5PxgOQ/BybvlSG79CJj6qBZyOpqTc+qGaTpbm4ehYHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUbQUKdV4pQkU2kZ88qDMJMDpqiSAwHwYDVR0j
BBgwFoAU8sbgWH/X9wARNHqbk2eaERqaf7kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC9GMkM2RTA1ODdGRDdGNzAwMTEzNDdBOUI5MzY3OUExMTFBOUE3RkI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQzZFMDU4N0ZEN0Y3MDAx
MTM0N0E5QjkzNjc5QTExMUE5QTdGQjkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZTDANBgkqhkiG9w0BAQsFAAOCAQEAOb2+dwwUCawu
x+jaUcPwHFm7nUDGON2XfE47venWWOfi1tuMvYD8vFtE2VFQM03w2cMIeyVnTtg7
BYtCEvVjngXWSwj89TVt8DLHcm6ihISOIIR5w9xHdykW1lSLJtFCOGUvzfghWixT
QIOfMSyuSmBY21HoacV/pIGmh+4n8M1F6thZ4t6K+BRpHbYAtU1wPaFovLAmJxNs
U2+be85Gq5LojFyBPh1VqUx3ceJfTyEs0jL8fxilebYI7dCCX7R6z2y2VqqXA1o+
5ijOc7LvelWatRL6/jabvMa+eZ+uuEhH0j7u7Kr6l7yYiukCmQ+z4F+K04w8F0z3
66JmOo2KZg==
-----END CERTIFICATE-----
Generated at Fri Apr 18 15:38:55 2025 by rpki-client